3.6
CVE-2026-0995
- EPSS 0.02%
- Veröffentlicht 02.03.2026 14:52:55
- Zuletzt bearbeitet 20.04.2026 12:53:59
- Quelle arm-security@arm.com
- CVE-Watchlists
- Unerledigt
An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arm ≫ C1-pro Firmware Version < r1p2-50eac0
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.032 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 3.6 | 1 | 2.5 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
|
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.